https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T11:31:12.169085+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-07242 cnvd-2015-07242 2026-10-10T11:31:12.257591+00:00 cnvd-2015-07242 https://cve.radiocsirt.org/vuln/euvd-2026-95453 EUVD-2026-95453 2026-10-10T11:31:12.257630+00:00 EUVD-2026-95453 https://cve.radiocsirt.org/vuln/fkie_cve-2015-8036 fkie_cve-2015-8036 2026-10-10T11:31:12.257644+00:00

Heap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a denial of service (client crash) and possibly execute arbitrary code via a long session ticket name to the session ticket extension, which is not properly handled when creating a ClientHello message to resume a session. NOTE: this identifier was SPLIT from CVE-2015-5291 per ADT3 due to different affected version ranges.

 https://cve.radiocsirt.org/vuln/ghsa-h6fm-cj44-vv3x GHSA-h6fm-cj44-vv3x 2026-10-10T11:31:12.257677+00:00

Heap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a denial of service (client crash) and possibly execute arbitrary code via a long session ticket name to the session ticket extension, which is not properly handled when creating a ClientHello message to resume a session. NOTE: this identifier was SPLIT from CVE-2015-5291 per ADT3 due to different affected version ranges.

 https://cve.radiocsirt.org/vuln/gsd-2015-8036 gsd-2015-8036 2026-10-10T11:31:12.257695+00:00 gsd-2015-8036 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-8036 Withdrawn: UBUNTU-CVE-2015-8036 2026-10-10T11:31:12.257706+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: mbedtls

Heap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a denial of service (client crash) and possibly execute arbitrary code via a long session ticket name to the session ticket extension, which is not properly handled when creating a ClientHello message to resume a session. NOTE: this identifier was SPLIT from CVE-2015-5291 per ADT3 due to different affected version ranges.